CVE-2003-0770

FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote…

published September 12, 2003

CVSS
—
EPSS
11%
Percentile
95.9
In the wild
Unconfirmed
What it is

FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11080 · 95.9th percentile
Published
2003-09-12T04:00Z
EPSS history
Timeline
  • 12 SEP 04:00Z
    FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote…
    cvelistv5